$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft File: olvfdj8LpjxJo3ar-W5VUIeehbo.mft (raw, json) Hash identifier: wD/na+G6huBd/smBcaEiuyttyyzQi56Lf7+sDf0KjI8= Subject key identifier: BC:6D:AE:3C:09:CA:DE:3B:52:A4:44:FB:59:ED:4C:02:AD:A5:76:1F Authority key identifier: A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA Certificate issuer: /CN=A912C738/serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA Certificate serial: 05F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft Manifest number: 05F0 Signing time: Sun 19 Oct 2025 00:33:35 +0000 Manifest this update: Sun 19 Oct 2025 00:33:34 +0000 Manifest next update: Sun 26 Oct 2025 00:33:34 +0000 Files and hashes: 1: olvfdj8LpjxJo3ar-W5VUIeehbo.crl (hash: 1d6UjOC5HxU/7IvRPwWNGcywoHp23DLhHJZ+FptMJSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1520 (0x5f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C738, serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA Validity Not Before: Oct 19 00:33:34 2025 GMT Not After : Oct 26 00:33:34 2025 GMT Subject: CN=68f431df-47f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:88:6d:91:76:69:be:2c:47:53:01:95:bb:da: cf:a9:29:64:e6:96:00:5c:86:b6:7e:c9:24:5f:b2: 52:fc:b0:54:ae:fb:91:e9:fe:48:32:ec:85:03:c6: 83:96:e3:42:fb:0c:c4:aa:66:53:fc:09:a2:f2:bc: 6d:01:33:47:53:7e:e2:f1:21:0c:c0:ff:98:6e:aa: 00:86:19:ca:be:8b:33:48:88:ea:a9:bc:1b:7a:7c: 03:cf:ee:95:36:a7:4c:89:bf:c6:16:2b:ab:18:7e: 0b:6f:92:10:82:e4:7e:de:c4:2c:69:ae:04:ed:28: 5e:93:bc:ad:92:8c:7a:b1:28:ac:17:f8:30:b2:8e: 8d:62:e5:fd:0f:6d:d0:11:8d:dd:6b:ff:9c:73:5c: ae:6b:54:f7:90:0f:bf:92:bc:39:ca:bf:9f:91:15: 5f:c4:0c:18:33:6a:44:11:a4:59:ff:f5:dd:ff:3d: ae:2d:de:c2:56:d7:3b:4a:31:a7:82:d9:e6:b6:0c: 0c:fe:2d:03:2c:3d:65:d4:7e:8e:4e:c8:ca:f4:17: 85:c9:34:34:52:c5:92:6f:74:1a:e0:aa:39:cf:51: 58:7b:85:d1:ec:ea:1e:f8:db:e9:eb:28:73:57:db: ee:ab:3e:97:61:c7:81:e2:96:72:22:c2:e0:29:02: aa:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6D:AE:3C:09:CA:DE:3B:52:A4:44:FB:59:ED:4C:02:AD:A5:76:1F X509v3 Authority Key Identifier: keyid:A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:97:be:5d:56:7c:14:67:69:38:27:f6:24:8e:20:47:94:ef: 3f:6b:00:84:9f:4f:fc:8c:dc:96:34:05:5e:71:a1:1c:f6:2e: db:21:d0:64:f9:e1:6e:9a:cf:d5:21:3d:32:50:e1:a5:87:dd: f0:97:c2:f1:a4:5d:08:f2:a8:81:11:3a:55:b0:c4:ab:65:60: 65:d6:94:07:13:0a:e8:f4:45:8d:64:75:83:f2:b9:8a:69:b5: 3b:b6:cb:a6:14:b8:47:96:0f:1e:9c:07:af:49:83:55:98:5e: f7:db:ba:4a:17:87:ff:bd:8c:0d:d4:a5:40:fe:5e:d1:28:12: f7:5c:58:24:d4:f6:8e:15:73:1e:cc:34:7f:cb:8e:6f:51:4c: d1:80:a5:ec:4e:3d:d4:c4:6a:70:69:91:3c:0a:6a:b4:b5:45: 07:c0:d7:ea:78:a0:6a:80:f1:16:b4:33:5d:1a:78:fc:46:ff: 1a:f3:fa:95:a4:ed:90:63:d7:ef:d9:d4:92:06:dd:73:dd:15: 30:36:4e:ed:b8:78:7f:e2:d5:6d:1e:c3:9b:61:f9:58:46:11: ee:ea:c4:e0:cd:9d:b4:5f:fd:f1:45:8e:f7:25:9c:3f:b2:22: 06:43:b6:8e:3f:01:e7:3f:35:c6:d4:51:0a:1c:41:49:cf:16: 8b:7a:57:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3MzgxMTAvBgNVBAUTKEEyNUJERjc2M0YwQkE2M0M0OUEzNzZBQkY5NkU1NTUw ODc5RTg1QkEwHhcNMjUxMDE5MDAzMzM0WhcNMjUxMDI2MDAzMzM0WjAYMRYwFAYD VQQDEw02OGY0MzFkZi00N2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIhtkXZpvixHUwGVu9rPqSlk5pYAXIa2fskkX7JS/LBUrvuR6f5IMuyFA8aD luNC+wzEqmZT/Ami8rxtATNHU37i8SEMwP+YbqoAhhnKvoszSIjqqbwbenwDz+6V NqdMib/GFiurGH4Lb5IQguR+3sQsaa4E7Shek7ytkox6sSisF/gwso6NYuX9D23Q EY3da/+cc1yua1T3kA+/krw5yr+fkRVfxAwYM2pEEaRZ//Xd/z2uLd7CVtc7SjGn gtnmtgwM/i0DLD1l1H6OTsjK9BeFyTQ0UsWSb3Qa4Ko5z1FYe4XR7Ooe+Nvp6yhz V9vuqz6XYceB4pZyIsLgKQKq+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxtrjwJ yt47UqRE+1ntTAKtpXYfMB8GA1UdIwQYMBaAFKJb33Y/C6Y8SaN2q/luVVCHnoW6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzczOC8zQkYwQUU5Q0M5 RDExMUVCOERDNUQyMTBDNEY5QUUwMi9vbHZmZGo4THBqeEpvM2FyLVc1VlVJZWVo Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29sdmZkajhMcGp4Sm8zYXItVzVWVUllZWhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzczOC8zQkYwQUU5Q0M5RDExMUVCOERDNUQyMTBDNEY5QUUwMi9vbHZmZGo4THBq eEpvM2FyLVc1VlVJZWVoYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEl75dVnwUZ2k4J/YkjiBHlO8/awCEn0/8jNyWNAVecaEc9i7bIdBk +eFums/VIT0yUOGlh93wl8LxpF0I8qiBETpVsMSrZWBl1pQHEwro9EWNZHWD8rmK abU7tsumFLhHlg8enAevSYNVmF7327pKF4f/vYwN1KVA/l7RKBL3XFgk1PaOFXMe zDR/y45vUUzRgKXsTj3UxGpwaZE8Cmq0tUUHwNfqeKBqgPEWtDNdGnj8Rv8a8/qV pO2QY9fv2dSSBt1z3RUwNk7tuHh/4tVtHsObYflYRhHu6sTgzZ20X/3xRY73JZw/ siIGQ7aOPwHnPzXG1FEKHEFJzxaLeld1 -----END CERTIFICATE-----Generated at Mon Oct 20 14:45:13 2025 by rpki-client